Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4c6dd657-0082-3f12-979f-846843a9cbcf.roa
File:                     4c6dd657-0082-3f12-979f-846843a9cbcf.roa (raw, json)
Hash identifier:          1QN/o2lhpNJayEOJ3gCRnkk4aaJEJmN2GLTVKXe8UpA=
Subject key identifier:   61:14:BB:61:E9:7F:61:26:CD:03:E5:35:F7:A1:2A:DC:70:5F:44:9D
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584D0C6CD4CAAFC3E497134AEF80
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4c6dd657-0082-3f12-979f-846843a9cbcf.roa
Signing time:             Tue 03 Mar 2026 18:50:33 +0000
ROA not before:           Tue 03 Mar 2026 18:50:33 +0000
ROA not after:            Mon 01 Jun 2026 17:50:33 +0000
asID:                     26337
IP address blocks:        66.235.195.0/24 maxlen: 24
                          66.235.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:6c:d4:ca:af:c3:e4:97:13:4a:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Mar  3 18:50:33 2026 GMT
            Not After : Jun  1 17:50:33 2026 GMT
        Subject: CN=ab6ec7d7-d7f6-42f8-8af5-33799558cf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:b6:35:07:ff:d4:93:55:80:16:97:8b:b6:
                    84:b8:f2:be:ee:af:23:3c:05:b9:1a:fa:3a:a7:11:
                    a2:48:55:79:c0:1d:49:9a:17:a4:09:51:d1:f7:18:
                    2a:cf:c5:9b:b3:bf:a0:94:60:30:5c:2e:57:4c:96:
                    81:5d:b4:13:b7:b9:18:9d:4a:ea:99:11:db:d7:ad:
                    ae:51:ad:4c:3a:71:d9:c5:16:b0:d1:22:2a:d6:af:
                    98:30:47:63:d6:29:af:44:6e:06:a9:06:fe:99:79:
                    a8:29:fb:47:21:3b:16:f8:64:27:b9:8b:c6:54:3a:
                    5f:18:84:ac:18:43:1c:ba:ab:ef:48:f7:e7:1e:7e:
                    31:97:07:eb:2d:8e:fa:07:8d:a1:05:6b:64:b3:0c:
                    f1:f3:4f:82:9b:b1:39:9d:0a:04:b9:da:66:21:be:
                    f7:c8:93:50:e0:d0:69:91:d4:4e:28:d9:ad:ef:79:
                    4a:d0:63:0b:28:cd:f8:e2:86:28:ae:f5:ea:1e:14:
                    23:8d:b2:d1:fa:26:fb:30:19:94:c6:11:c9:56:7e:
                    66:8f:de:f9:f8:2c:ab:c6:6e:0f:68:e5:ad:58:9b:
                    82:6a:92:a1:00:01:cc:2b:42:8f:84:38:c6:1a:73:
                    b9:0f:9a:8a:b7:72:c7:52:be:16:bb:d8:0a:18:6c:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:14:BB:61:E9:7F:61:26:CD:03:E5:35:F7:A1:2A:DC:70:5F:44:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/4c6dd657-0082-3f12-979f-846843a9cbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.235.195.0-66.235.199.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:57:5e:47:8c:10:4d:69:ed:48:ba:8e:c0:d5:bf:82:53:6a:
         22:20:6a:60:e5:d1:54:f4:f3:45:5d:60:10:bb:21:19:50:08:
         bf:e0:c7:a4:7e:e3:79:71:de:c8:73:c2:2d:d5:4c:5e:12:9f:
         50:e3:29:dd:2c:d8:30:92:da:c9:66:db:cd:08:ec:47:62:b5:
         99:01:7b:2c:2e:39:d6:bb:60:37:c0:ce:75:47:20:dd:40:e6:
         76:2b:ca:c6:5e:02:9c:64:f1:5e:3e:e6:b1:f1:86:5e:fe:b7:
         a8:85:3a:d4:eb:5f:0b:9f:5b:30:87:dc:4e:f7:6c:f5:65:48:
         78:1c:b6:3b:3d:3f:c1:ce:6a:ba:5a:93:0b:d5:4e:5b:43:b9:
         5c:ff:17:99:83:f6:f9:5b:71:c3:74:2d:60:bf:b3:aa:3f:c3:
         b6:5e:ab:55:5b:e3:3b:3c:61:63:8b:63:d9:87:45:a1:77:91:
         cf:1e:af:b9:42:e1:db:19:77:b1:89:32:ca:2a:12:79:b8:e8:
         af:2c:e3:1b:e5:09:11:0f:c5:24:ab:cb:12:40:32:b5:57:f1:
         2c:a9:a4:7f:ec:26:f8:01:78:5c:06:8f:cb:ad:d4:7e:55:5c:
         59:78:49:f5:40:04:28:75:34:ad:82:72:a0:d0:62:5f:8d:a3:
         54:20:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:31:16 2026 by rpki-client